Information Technology Security Administrator

Loft Federal; Boulder (CO); On-site; USD 115,000 - 145,000; Full time

Job summary

Loft Federal is seeking a highly technical IT Systems Security Administrator to harden configurations, patch vulnerabilities, manage IAM, and ensure compliance with CMMC 2.0 (Level 2) and NIST SP 800-171 across on‑prem and cloud environments.

You will collaborate with DevSecOps to enforce security controls, implement secure configurations in M365 GCC High, Google Cloud, and AWS GovCloud, and drive vulnerability management, threat assessments, and incident investigations.

Qualifications

• 5+ years of hands‑on Systems Administration with a heavy focus on IT security.
• US Citizenship is required due to federal contracting compliance and data handling requirements.
• Active DoD Secret clearance is required; TS/SCI clearance may be required for some programs.
• Bachelor's degree or higher preferred in information technology or related field.

Responsibilities

• Configure and harden Windows/Linux endpoints, servers, and networks per CIS benchmarks or DISA STIGs.
• Secure cloud environments: Microsoft 365 GCC High, Google Cloud, AWS GovCloud.
• Implement and manage MDM policies using Microsoft Intune or equivalent.
• Enforce IAM controls: MFA, SSO, and conditional access policies.
• Manage network security: firewalls, secure Wi‑Fi, VPNs, NAC.
• Configure, monitor, and tune EDR and SIEM logs.
• Ensure compliance with internal security policies and security plan.
• Assist investigations of security violations and incidents; report findings.
• Lead vulnerability management lifecycle: scans, analysis, prioritization, patches.
• Collaborate with DevSecOps to maintain NIST/CMMC compliance across CI/CD.

Skills

IT security

Systems Administration

Cloud security

Education

Bachelor's degree in information technology

Tools

NIST SP 800-37/800-53

Azure Security Engineer Associate

Security+ CE

CCNA Security

Job description

About Loft Federal
Loft Federal is committed to delivering the U.S. national security space community a fast, affordable, and streamlined pathway to orbit. As a wholly owned U.S. subsidiary of Loft Orbital Solutions, Inc., we specialize in providing mission‑ready space infrastructure with unmatched efficiency.

At Loft, we empower our team with autonomy, ownership, and bold problem‑solving opportunities while fostering a tight‑knit, supportive environment. We believe that diversity, inclusivity, and community are the foundation of an open and innovative culture. We value kind, collaborative, and mission‑driven teammates who excel in problem‑solving and communication—because great solutions come from great teams.

Are you ready to embark on this exciting journey with us? As the IT Systems Security Administrator at Loft Federal, you will turn policy into practice by hardening configurations, deploying security tools, managing identity/access, patching vulnerabilities, and generating the technical logs and evidence needed to maintain compliance with CMMC 2.0 (Level 2) and NIST SP 800-171.

The ideal candidate will be a highly technical, hands‑on IT Systems Security Administrator to implement, maintain, and secure our on‑premises and cloud infrastructure. In this role, you will be a technical engine executing our security controls.

The Role

• Configure and harden Windows/Linux endpoints, servers, and networks according to industry standards (e.g., CIS Benchmarks or DISA STIGs) to satisfy NIST/CMMC technical controls.
• Administer and secure our cloud environments, specifically managing secure configurations in Microsoft 365 GCC High, Google GCP, and AWS Gov cloud environments.
• Implement and manage robust Mobile Device Management (MDM) policies using Microsoft Intune or equivalent tools.
• Implement and enforce strict Identity and Access Management (IAM) controls, including Multi‑Factor Authentication (MFA), Single Sign‑On (SSO), and conditional access policies.
• Configure and manage corporate network security, including firewalls, secure Wi‑Fi, VPNs, and Network Access Control (NAC).
• Configure, fine‑tune, and monitor security tools, including Endpoint Detection & Response (EDR) and SIEM logs.
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan.
• Assist in investigations of computer security violations and incidents, reporting as necessary to the appropriate parties.
• Assist with the technical vulnerability management lifecycle: execute regular vulnerability scans, analyze results, prioritize, and deploy patches across all systems.
• Participate in threat, vulnerability, and risk assessments to implement effective security changes across the business.
• Collaborate closely with the DevSecOps team to enforce and maintain NIST/CMMC compliance across our software development infrastructure, CI/CD pipelines, and application deployments.

Must Haves

• Experience: 5+ years of hands‑on experience in Systems Administration with a heavy focus on IT security.
• Citizenship: U.S. Citizenship is required due to federal contracting compliance and data handling requirements.
• Active DoD Secret clearance is required.
• The ability to obtain and maintain a Top Secret / Sensitive Compartmented Information (TS/SCI) clearance is required.

Nice to Haves

• Bachelor’s degree in information technology or a related field.
• Experience with NIST 800-37, 800-53
• IAT Level II Certification: Security+ CE, CCNA Security
• Additional hands‑on technical certifications (e.g., Azure Security Engineer Associate, CySA+, or Network+).
• Demonstrated problem‑solving and analytical abilities.
• Familiarity with current cybersecurity threats and mitigation strategies.
• Ability to work collaboratively with cross‑functional teams.

Per Colorado law, we are required to disclose the base compensation range for this role. This range is intentionally wide as we assess individuals based on their unique abilities and experience to find the best fit for our needs. Ultimately, your compensation will be determined by your education, experience, knowledge, skills, and abilities. In addition to a competitive salary and benefits package, you will find a truly remarkable culture guided by transparency and collaboration and work that is challenging and meaningful. We can't wait to meet you and see what you may add to our team!

Salary Range: $115,000 USD - $145,000 USD

Equal Employment Opportunity & Affirmative Action

Loft Federal is an Equal Employment Opportunity and Aff... (trimmed for brevity but full EEO statement is retained in actual output)

Accessibility & Accommodations

If you require a reasonable accommodation due to a disability when applying for an open position, please contact us at [e-mail] for assistance.

We Hire for Talent, Not Just Resumes

Research shows that while men apply for jobs when they meet about 60% of the qualifications, women and other underrepresented groups tend to apply only when they meet 100% of the listed criteria. At Loft Federal, we value diverse perspectives, respectful debate, and people who challenge assumptions. If you’re excited about a role but don’t meet every requirement, we strongly encourage you to apply.

Third‑Party Recruiters & Agencies

No outside recruiters, please. Loft Federal does not accept unsolicited resumes from headhunters, staffing agencies, or third‑party recruiters. We will not pay fees for candidates submitted without a signed agreement in place.